Re: SSL error

13 Oct 2016


      On Thu, Oct 13, 2016 at 10:30 AM Christian Kivalo <ml+dovecot@valo.at>
wrote:
...
On 2016-10-13 10:12, arnaud gaboury wrote:
...
On Thu, Oct 13, 2016 at 8:48 AM Christian Kivalo <ml+dovecot@valo.at>
...
wrote:
...
...
...
...
...
...
...
...
...
...
...
Am 13. Oktober 2016 08:41:06 MESZ, schrieb arnaud gaboury <
...
...
arnaud.gaboury@gmail.com>:
...
...
...
...
...
I run dovecot + postfix as my email server. Everything is working as
...
...
...
...
...
expected, but I see an error in the dovecot logs:
...
...
...
...
...
...
...
...
...
...
lmtp(7331): Error: SSL context initialization failed, disabling SSL:
...
...
...
...
...
ENGINE_init(dynamic) failed
...
...
...
...
...
...
...
...
...
...
Dovecot is running and emails are OK. I wonder why this error and how I
...
...
...
...
...
can
...
...
...
...
...
fix it? I see it is a SSL issue but no idea in which direction to look.
...
...
...
...
...
Thank you for help
...
...
...
...
Please post the complete log lines and the output of dovecot -n
...
...
...
...
...
$ journalctl --unit=dovecot
...
Oct 13 08:20:20 thetradinghall.com systemd[1]: Started Dovecot
...
IMAP/POP3
...
email server.
...
Oct 13 08:20:20 thetradinghall.com dovecot[7333]: lmtp(7331): Error:
...
SSL
...
context initialization failed, disabling SSL: ENGINE_init(dynamic)
...
failed
...
Oct 13 08:20:20 thetradinghall.com dovecot[7333]: lmtp(7337): Error:
...
SSL
...
context initialization failed, disabling SSL: ENGINE_init(dynamic)
...
failed
...
Oct 13 08:20:20 thetradinghall.com dovecot[7333]: lmtp(7338): Error:
...
SSL
...
context initialization failed, disabling SSL: ENGINE_init(dynamic)
...
failed
...
........................
...
...
...
$ dovecot -n
...
# 2.2.25 (7be1766): /etc/dovecot/dovecot.conf
...
# OS: Linux 4.7.4-1-hortensia_docker x86_64 Fedora release 24 (Twenty
...
Four)
...
auth_cache_size = 10 M
...
auth_debug = yes
...
auth_debug_passwords = yes
...
auth_mechanisms = plain login
...
auth_verbose = yes
...
auth_verbose_passwords = plain
...
doveadm_socket_path = /run/dovecot/doveadm-server
...
imap_id_log = *
...
info_log_path = /storage/log/dovecot/dovecot-info.log
...
mail_debug = yes
...
mail_gid = 5000
...
mail_location = maildir:~:LAYOUT=fs
...
mail_server_admin = mailto:admin@thetradinghall.com
...
mail_uid = 5000
...
mailbox_list_index = yes
...
maildir_very_dirty_syncs = yes
...
namespace inbox {
...
inbox = yes
...
location =
...
mailbox Archive {
...
auto = create
...
special_use = \Archive
...
}
...
mailbox Drafts {
...
auto = create
...
special_use = \Drafts
...
}
...
mailbox Junk {
...
auto = create
...
special_use = \Junk
...
}
...
mailbox Sent {
...
auto = create
...
special_use = \Sent
...
}
...
prefix =
...
separator = /
...
type = private
...
}
...
passdb {
...
args = /etc/dovecot/dovecot-sql.conf.ext
...
driver = sql
...
}
...
protocols = imap lmtp
...
service auth-worker {
...
user = vmail
...
}
...
service auth {
...
unix_listener /var/spool/postfix/private/auth {
...
group = postfix
...
mode = 0666
...
user = postfix
...
}
...
unix_listener auth-userdb {
...
group = postfix
...
mode = 0600
...
user = postfix
...
}
...
user = root
...
}
...
service imap-login {
...
inet_listener imaps {
...
port = 993
...
ssl = yes
...
}
...
}
...
service lmtp {
...
process_min_avail = 10
...
unix_listener /var/spool/postfix/private/dovecot-lmtp {
...
group = postfix
...
mode = 0600
...
user = postfix
...
}
...
}
...
ssl = required
...
ssl_cert = </etc/letsencrypt/live/thetradinghall.com/fullchain.pem
...
ssl_crypto_device = dynamic
^^ does it work when you comment/remove this setting?
from my 10-ssl.conf
# SSL crypto device to use, for valid values run "openssl engine"
#ssl_crypto_device =
by default ssl_crypto_device is not set.
the line was uncommented, so I commented it. Now .-)

● dovecot.service - Dovecot IMAP/POP3 email server
Loaded: loaded (/usr/lib/systemd/system/dovecot.service; enabled; vendor
preset: disabled)
Active: active (running) since Thu 2016-10-13 10:46:27 CEST; 6s ago
Docs: man:dovecot(1)
http://wiki2.dovecot.org/
Process: 9793 ExecStop=/usr/bin/doveadm stop (code=exited,
status=0/SUCCESS)
Process: 9806 ExecStart=/usr/sbin/dovecot (code=exited, status=0/SUCCESS)
Process: 9804 ExecStartPre=/usr/libexec/dovecot/prestartscript
(code=exited, status=0/SUCCESS)
Main PID: 9807 (dovecot)
CGroup: /machine.slice/systemd-nspawn@poppy.service
/system.slice/dovecot.service
├─9807 /usr/sbin/dovecot
├─9808 dovecot/lmtp
├─9809 dovecot/anvil
├─9810 dovecot/log
├─9811 dovecot/ssl-params
├─9812 dovecot/lmtp
├─9813 dovecot/lmtp
├─9814 dovecot/lmtp
├─9815 dovecot/lmtp
├─9816 dovecot/lmtp
├─9817 dovecot/lmtp
├─9818 dovecot/lmtp
├─9819 dovecot/lmtp
├─9820 dovecot/lmtp
└─9821 dovecot/config
Oct 13 10:46:27 thetradinghall.com systemd[1]: Starting Dovecot IMAP/POP3
email server...
Oct 13 10:46:27 thetradinghall.com systemd[1]: dovecot.service: PID file
/var/run/dovecot/master.pid not r
Oct 13 10:46:27 thetradinghall.com systemd[1]: Started Dovecot IMAP/POP3
email server.
Thank you so much for your precious help.
...
...
ssl_key = </etc/letsencrypt/live/thetradinghall.com/privkey.pem
...
ssl_protocols = !SSLv2 !SSLv3
...
userdb {
...
args = uid=5000 gid=5000 home=/storage/vmail/%d/%n
...
driver = static
...
}
...
verbose_ssl = yes
...
protocol lmtp {
...
hostname = thetradinghall.com
...
postmaster_address = postmaster@thetradinghall.com
...
}
...
...
--
Christian Kivalo

Re: SSL error

arnaud gaboury

Oct 13 10:46:27 thetradinghall.com systemd[1]: Starting Dovecot IMAP/POP3 email server... Oct 13 10:46:27 thetradinghall.com systemd[1]: dovecot.service: PID file /var/run/dovecot/master.pid not r Oct 13 10:46:27 thetradinghall.com systemd[1]: Started Dovecot IMAP/POP3 email server.